$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft File: NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json) Hash identifier: MLAxvyX9EjtWKd16KJK2XsQzURVrYi1gxv/BJvKgB6U= Subject key identifier: 85:72:E3:D1:83:BE:A0:32:C4:5C:11:33:F8:C9:23:AC:3B:54:04:A7 Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD Certificate issuer: /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft Manifest number: 0797 Signing time: Sun 03 Aug 2025 01:00:22 +0000 Manifest this update: Sun 03 Aug 2025 01:00:22 +0000 Manifest next update: Sun 10 Aug 2025 01:00:22 +0000 Files and hashes: 1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: eITtGBoXAfqNQn3UFRIzgWCopduBbhXjfwiqdj3Di+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Validity Not Before: Aug 3 01:00:22 2025 GMT Not After : Aug 10 01:00:22 2025 GMT Subject: CN=688eb4a6-d54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:3b:77:1e:69:a5:e4:d9:67:72:b0:dd:82: b7:c1:c7:06:fb:7e:ae:87:30:11:3e:89:58:ca:e6: ee:e8:08:3f:de:1d:d5:51:73:b9:57:c5:05:dc:ee: 55:eb:2c:e1:f6:15:a2:b1:86:5d:14:52:ae:c7:09: f4:0e:1e:db:02:f3:41:0e:34:e7:c1:ba:ab:28:4b: d1:86:e9:0a:5c:c4:70:42:da:d1:4c:49:5b:cf:02: f6:9b:e5:57:30:ff:ac:1d:f9:29:2b:65:c2:f5:ad: 99:69:d5:f5:bf:05:63:73:12:06:b3:92:d1:58:08: 0f:e3:79:b2:e3:53:ff:14:3d:eb:c0:c0:9f:46:a8: 39:97:e0:67:ad:f7:b2:c6:b1:fa:d6:46:b7:e0:6a: 30:32:ef:5e:26:6f:3f:2b:28:eb:23:35:e0:f8:d1: a5:b9:c0:73:05:40:ad:07:68:04:0f:6f:03:15:50: 13:30:3c:e5:3e:8d:f7:90:ed:2b:32:fb:72:1c:69: 19:c6:12:24:60:98:91:a8:e8:a8:4e:99:02:01:1a: 97:d4:01:5f:1c:3f:98:06:1b:08:1b:be:33:76:04: a6:88:1c:3f:4e:3b:32:3b:28:87:c0:b7:48:02:38: 65:2f:b3:dc:5f:c4:23:b7:b8:23:39:e6:85:c8:73: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:E3:D1:83:BE:A0:32:C4:5C:11:33:F8:C9:23:AC:3B:54:04:A7 X509v3 Authority Key Identifier: keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a5:75:78:4e:c2:f5:0d:92:5c:c5:e5:b5:af:e4:e5:bb:0e: 1a:bf:56:5b:ba:96:d3:83:c8:99:2d:2d:61:d1:e3:0f:9c:ff: de:26:78:2f:7b:b7:90:a7:76:bc:e5:7c:48:0b:0d:2a:7a:fa: 28:73:90:01:64:fb:8c:d6:5e:c1:6f:8c:a7:4c:5d:3f:83:d4: e7:7a:30:69:7b:94:f1:88:2b:8a:73:ef:8c:7d:1b:87:52:2b: 3f:3e:bc:ed:ec:25:bb:fc:64:27:1c:b0:fc:0b:a3:c1:d3:46: 67:89:27:60:3c:c8:1c:4a:2a:03:ed:9b:90:eb:51:0a:55:41: 0a:94:43:87:3f:fe:a2:e7:ae:c9:e9:fa:dd:50:dd:52:75:2a: b0:5b:af:28:59:55:27:bd:4b:8a:44:63:1e:8f:a8:43:ca:a5: 21:9a:fb:43:d0:5d:0c:63:c3:13:b6:1a:11:22:39:21:93:f2: 36:4b:8a:78:b3:2e:c2:28:5b:51:72:d3:4f:5c:f8:e2:d4:05: 2b:a9:36:60:72:7f:b3:fc:84:53:cc:bc:63:df:3c:45:75:be: 57:f3:e5:67:3e:e5:1e:49:22:80:93:f1:44:25:b8:8d:ca:37: 49:05:41:4f:6f:da:34:9d:22:d3:cc:6f:72:6f:59:d0:f7:13: 0a:28:27:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE RjYzQzg2Q0QwHhcNMjUwODAzMDEwMDIyWhcNMjUwODEwMDEwMDIyWjAYMRYwFAYD VQQDEw02ODhlYjRhNi1kNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvto7dx5ppeTZZ3Kw3YK3wccG+36uhzARPolYyubu6Ag/3h3VUXO5V8UF3O5V 6yzh9hWisYZdFFKuxwn0Dh7bAvNBDjTnwbqrKEvRhukKXMRwQtrRTElbzwL2m+VX MP+sHfkpK2XC9a2ZadX1vwVjcxIGs5LRWAgP43my41P/FD3rwMCfRqg5l+Bnrfey xrH61ka34GowMu9eJm8/KyjrIzXg+NGlucBzBUCtB2gED28DFVATMDzlPo33kO0r MvtyHGkZxhIkYJiRqOioTpkCARqX1AFfHD+YBhsIG74zdgSmiBw/TjsyOyiHwLdI AjhlL7PcX8Qjt7gjOeaFyHMeNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVy49GD vqAyxFwRM/jJI6w7VASnMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z ZUNJSm5CLTVrZnpmWThoczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHpXV4TsL1DZJcxeW1r+Tluw4av1ZbupbTg8iZLS1h0eMPnP/eJngv e7eQp3a85XxICw0qevooc5ABZPuM1l7Bb4ynTF0/g9TnejBpe5TxiCuKc++MfRuH Uis/Przt7CW7/GQnHLD8C6PB00ZniSdgPMgcSioD7ZuQ61EKVUEKlEOHP/6i567J 6frdUN1SdSqwW68oWVUnvUuKRGMej6hDyqUhmvtD0F0MY8MTthoRIjkhk/I2S4p4 sy7CKFtRctNPXPji1AUrqTZgcn+z/IRTzLxj3zxFdb5X8+VnPuUeSSKAk/FEJbiN yjdJBUFPb9o0nSLTzG9yb1nQ9xMKKCe2 -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:43 2025 by rpki-client